[linux-cifs-client] Mounting CIFS gives me permission denied

[Neil Aggarwal]

James:

I tried it with administrator which does have permission to
mount the drive.  I also tried the mount on a windows computer
and it worked fine.  I don't think the user name and password
are the problem.

I tried tcpdump, but everything is happening on port 445, so
tcpdump is not decoding the packets.  Is there a way to
use tcpdump for this?

/proc/fs/cifs/PacketSigningEnabled has a 1 in it already,
so that cant be the problem.

Thanks,
	Neil


--
Neil Aggarwal, JAMM Consulting, (972)612-6056, www.JAMMConsulting.com
FREE! Valuable info on how your business can reduce operating costs by
17% or more in 6 months or less! http://newsletter.JAMMConsulting.com


> -----Original Message-----
> From: James Philip Roper [mailto:u3205097 at anu.edu.au] 
> Sent: Monday, October 11, 2004 8:34 PM
> To: Neil Aggarwal; linux-cifs-client at lists.samba.org
> Subject: Re: [linux-cifs-client] Mounting CIFS gives me 
> permission denied
> 
> 
> Maybe the user na doesn't have permission to mount GDrive?  Also, if 
> your password is wrong, smbclient may fall back to anonymous, 
> which may 
> have permission to list the shares, but not to mount GDrive.  To find 
> out what is really happenning, an easy way is to fire up ethereal (or 
> tcpdump), and actually look at who smbclient is logging in 
> as, and who 
> smbmount and mount.cifs are trying to log in as.
> 
> Have you checked that smb signing is turned on? 
> (/proc/fs/cifs/PacketSigningEnabled)
> 
> James
> 
> Neil Aggarwal wrote:
> > Steve:
> > 
> > Here is something strange:
> > 
> > When I do this command:
> > 	smbclient -L 192.168.1.2 -U na	
> > It asks me for the password and then it gives 
> > me a list of the shares on the machine.
> > 
> > But, when I do this command:
> > 	smbclient -L 192.168.1.2 -U na/HOMEXCORP
> > It asks for a password and then it gives me this
> > message:
> > session setup failed: NT_STATUS_LOGON_FAILURE
> > 
> > When I try either of these:
> >   smbmount //192.168.1.2/GDrive /mnt/GDrive -o user=na  
> >   smbmount //192.168.1.2/GDrive /mnt/GDrive -o user=na/HOMEXCORP
> > I get these error messages:
> >   cli_negprot: SMB signing is mandatory and we have disabled it.
> >   5889: protocol negotiation failed
> >   SMB connection failed
> > 
> > When I try either of these:
> >  mount.cifs //192.168.1.2/GDrive /mnt/GDrive -o user=na 
> >  mount.cifs //192.168.1.2/GDrive /mnt/GDrive -o 
> user=na,domain=HOMEXCORP
> > It asks me for a password and I get these messages: 
> >   mount error 13 = Permission denied
> >   Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)
> > 	
> > Any ideas why the smbclient list works but smbmount and 
> > mount.cifs do not?
> > 
> > Thanks,
> > 	Neil
> > 
> > --
> > Neil Aggarwal, JAMM Consulting, (972)612-6056, 
> www.JAMMConsulting.com
> > FREE! Valuable info on how your business can reduce 
> operating costs by
> > 17% or more in 6 months or less! 
> http://newsletter.JAMMConsulting.com
> > 
> > -----Original Message-----
> > From: 
> linux-cifs-client-bounces+neil=jammconsulting.com at lists.samba.org
> > 
> [mailto:linux-cifs-client-bounces+neil=jammconsulting.com at list
s.samba.org]
> On Behalf Of Steven French
> Sent: Monday, October 11, 2004 1:30 PM
> To: Neil Aggarwal; linux-cifs-client at lists.samba.org
> Subject: Re: [linux-cifs-client] Mounting CIFS gives me permission denied
> 
> 
> 
> 
>>When I try this, I get:
>>mount error 13 = Permission denied 
> 
> 
> A few possbile causes come to mind   
> 1) Obviously a bad user or password (from a windows box you can override
the
> user and password explicitly on NET USE or use smbclient as an alternative
> to try a different client) 
> 2) specifying a user who is configured to not allow authentication across
> the network 
> 3) specifying a domain (or using the default domain) which does not match
> the servers domain 
> 4) restricted host (windows allows you to configure workstations that are
> not allowed to mount to a share) 
> 5) windows is configured for mandatory use of ntlmv2 or kerberos security
> (cifs support for ntlmv2 is not enabled in /proc/fs/cifs by default and
cifs
> kerberos support is not complete) 
> 
> 
> 
> Steve French
> Senior Software Engineer
> Linux Technology Center - IBM Austin
> phone: 512-838-2294
> email: sfrench at-sign us dot ibm dot com
> 
> _______________________________________________
> linux-cifs-client mailing list
> linux-cifs-client at lists.samba.org
> http://lists.samba.org/mailman/listinfo/linux-cifs-client